Re:Belgium Arrests Two in Probe Over Returning Syria Fighter
by nly on Tuesday June 09, 2015 @09:46AM
(#9685823)
As much as I like and respect Moxie, I think it's a huge personal risk for him to associate himself with Facebook (WhatsApp)[0].
That said, come on... there's no user exposed key management in Whatsapp, or secure means to perform a handshake with your contacts. Even if they've really rolled out Moxies crypto protocol on Android, like they claim (go look at the source and verify... oh, wait), on features alone you can't trust it... you just can't create a secure channel unless you're in control of the keys.
And on terrorists using Whatsapp... well, Whatsapp accounts are tied to your cell phone #. The authorities can work with WhatsApp to piece together who messaged who, and when, and where you both physically were at the time. This is enough to bust terrorists. Deploying E-to-E crypto was never about anonymity.
That said, come on... there's no user exposed key management in Whatsapp, or secure means to perform a handshake with your contacts. Even if they've really rolled out Moxies crypto protocol on Android, like they claim (go look at the source and verify... oh, wait), on features alone you can't trust it... you just can't create a secure channel unless you're in control of the keys.
And on terrorists using Whatsapp... well, Whatsapp accounts are tied to your cell phone #. The authorities can work with WhatsApp to piece together who messaged who, and when, and where you both physically were at the time. This is enough to bust terrorists. Deploying E-to-E crypto was never about anonymity.
[0] https://whispersystems.org/blog/whatsapp/